Methods and apparatus to improve security of a virtual private mobile network

• US 9,537,829 B2
• Filed: 10/23/2015
• Issued: 01/03/2017
• Est. Priority Date: 06/28/2011
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Wang, Wei, Shen, Charles
• Primary Examiner(s): Bengzon, Greg C
• Application Number:
  US14/921,881
• Publication Number:
  US 20160043998A1
• Time in Patent Office: 438 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04W 12/08 Access security

Abstract

Methods and apparatus are disclosed to prevent consecutive attacks on a virtual private mobile network. An example method includes for each of a plurality of network elements, generating virtualized slices based on a virtualized slice count value for subgroups associated with the virtual private mobile network, and assigning non-consecutive ones of the virtualized slices to the subgroups associated with the virtual private mobile network based on demand for the virtualized slices by the respective ones of the subgroups. The example method also includes, in response to a request from a mobile device to access the virtual private mobile network for a first time, assigning the mobile device to one of the virtual slices of the plurality of network elements based on (i) the subgroup associated with the mobile device, and (ii) availability of the virtual slices.

Claims

1. A method to prevent consecutive attacks on a virtual private mobile network, the method comprising:

for each of a plurality of network elements;

generating, with a hardware processor, virtualized slices based on a virtualized slice count value for subgroups associated with the virtual private mobile network, the virtualized slice count based on a multiplication factor associated with a number of subgroups defined within the virtual private mobile network, wherein the number of subgroups is at least two;

determining a demand for the virtualized slices by at least one of a number of expected users of one or more of the subgroups, a number of expected mobile devices that will use one or more of the subgroups, or an expected bandwidth to be used by one or more of the subgroups;

preventing consecutive attacks on the virtualized slices of the virtual private mobile network by assigning non-consecutive ones of the virtualized slices to the subgroups associated with the virtual private mobile network based on the demand for the virtualized slices by the respective ones of the subgroups; and

in response to a request from a mobile device to access the virtual private mobile network for a first time, assigning the mobile device to one of the virtual slices of the plurality of network elements based on (i) the subgroup associated with the mobile device, and (ii) availability of the virtual slices.

2. The method as defined in claim 1, further including determining the availability of the virtual slices based on load balancing information.

3. The method as defined in claim 1, further including determining the availability of the virtual slices based on a threshold number of mobile devices.

4. The method as defined in claim 1, wherein the assigning of the mobile device to the one of the virtual slices further includes assigning the mobile device to one of the available virtual slices based on an output of a random number generator.

5. The method as defined in claim 1, wherein the non-consecutive ones of the virtualized slices are alternating.

6. An apparatus to prevent consecutive attacks on a virtual private mobile network, the apparatus comprising:

a processor; and

a memory including instructions that, when executed, cause the processor to;

for each of a plurality of network elements;

generate virtualized slices based on a virtualized slice count value for subgroups associated with the virtual private mobile network, the virtualized slice count based on a multiplication factor associated with a number of subgroups defined within the virtual private mobile network, wherein the number of subgroups is at least two;

determine a demand for the virtualized slices by at least one of a number of expected users of one or more of the subgroups, a number of expected mobile devices that will use one or more of the subgroups, or an expected bandwidth to be used by one or more of the subgroups;

prevent consecutive attacks on the virtualized slices of the virtual private mobile network by assigning non-consecutive ones of the virtualized slices to the subgroups associated with the virtual private mobile network based on the demand for the virtualized slices by the respective ones of the subgroups; and

in response to a request from a mobile device to access the virtual private mobile network for a first time, assigning the mobile device to one of the virtual slices of the plurality of network elements based on (i) the subgroup associated with the mobile device, and (ii) availability of the virtual slices.

7. The apparatus as defined in claim 6, further including instructions that, when executed, cause the processor to determine the availability of the virtual slices based on load balancing information.

8. The apparatus as defined in claim 6, further including instructions that, when executed, cause the processor to determine the availability of the virtual slices based on a threshold number of mobile devices.

9. The apparatus as defined in claim 6, wherein to assign the mobile device to the one of the virtual slices, the instructions cause the processor to assign the mobile device to one of the available virtual slices based on an output of a random number generator.

10. The apparatus method as defined in claim 6, wherein the non-consecutive ones of the virtualized are alternating.

11. A machine accessible storage device comprising instructions that, when executed, cause a machine to, at least:

for each of a plurality of network elements;

generate virtualized slices based on a virtualized slice count value for subgroups associated with the virtual private mobile network, the virtualized slice count based on a multiplication factor associated with a number of subgroups defined within the virtual private mobile network, wherein the number of subgroups is at least two;

determine a demand for the virtualized slices by at least one of a number of expected users of one or more of the subgroups, a number of expected mobile devices that will use one or more of the subgroups, or an expected bandwidth to be used by one or more of the subgroups;

prevent consecutive attacks on the virtualized slices of the virtual private mobile network by assigning non-consecutive ones of the virtualized slices to the subgroups associated with the virtual private mobile network based on the demand for the virtualized slices by the respective ones of the subgroups; and

in response to a request from a mobile device to access the virtual private mobile network for a first time, assign the mobile device to one of the virtual slices of the plurality of network elements based on (i) the subgroup associated with the mobile device, and (ii) availability of the virtual slices.

12. The machine accessible storage device as defined in claim 11, further including instructions that, when executed, cause the machine to determine the availability of the virtual slices based on load balancing information.

13. The machine accessible storage device as defined in claim 11, further including instructions that, when executed, cause the machine to determine the availability of the virtual slices based on a threshold number of mobile devices.

14. The machine accessible storage device as defined in claim 11, wherein to assign the mobile device to the one of the virtual slices of each of the plurality of network elements, the instructions cause the machine to assign the mobile device to one of the available virtual slices based on an output of a random number generator.

15. The machine accessible storage device as defined in claim 11, wherein the non-consecutive ones of the virtualized slices are alternating.